secretariatsocialccr.org Improper Access Control vulnerability OBB-2175185

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2016-4813

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat aka CLERK users to gain privileges by creating a SYSTEMADMIN account...

Code injection

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat aka CLERK users to gain privileges by creating a SYSTEMADMIN account...

CVE-2016-4813: Improper Access Control

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat aka CLERK users to gain privileges by creating a SYSTEMADMIN account...

PT-2016-6157

Name of the Vulnerable Software and Affected Versions NetCommons versions 2.4.2.1 and earlier Description The issue allows remote authenticated secretariat users to gain privileges by creating a SYSTEM ADMIN account. Recommendations For NetCommons versions 2.4.2.1 and earlier, consider restrictin...

NetCommons vulnerable to privilege escalation

Overview NetCommons provided by the NetCommons Project contains a privilege escalation vulnerability. Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A user wi...

Malware stole 3000 confidential Documents from Japan ministry

Japan ministry become the recent victim of a cyber attack through a malware that suspected to have compromised and sent overseas more than 3,000 confidential documents from the ministry, including many on global trade negotiations. After investigation, experts found that Hackers use "HTran" the...